feat: Add workbench actions

[maciaszczykm]

Fixes PROD-5073 too.

Test Plan

Test environment: https://console.your-env.onplural.sh/

Checklist

• I have added a meaningful title and summary to convey the impact of this PR to a user.
• If required, I have updated the Plural documentation accordingly.
• I have added tests to cover my changes.
• I have deployed the agent to a test environment and verified that it works as expected (required only when changing agent code).

Plural Flow: console

[linear]

PROD-5064

PROD-5073

[soffi-ai]

Soffi AI Summary

This PR adds workbench actions — a first-class approval/action management workflow for AI workbench tool invocations. The motivation (also fixing PROD-5073) is to give operators visibility and control over AI agent tool calls that require human approval before executing, rather than letting them run unattended.

Key changes include:

Approval flow for workbench tools: A new "Approvals" step is added to the tool configuration form (conditionally shown only for tools that support it, e.g., cloud functions like Lambda, Cloud Run, and Azure Functions). Tools can now be configured with an approval flag requiring human sign-off before execution.

Actions tab in the workbench UI: A new dedicated "Actions" tab surfaces pending/actionable tool invocations in the workbench job view, shown only when there are pending actions. An actions panel in the awaiting-review sidebar now aggregates these across workbenches, with a new icon badge indicating pending actions.

Awaiting Review integration: The AwaitingReviewWorkbenchActivityItem component is introduced to render workbench activity (approve/deny/filter by status) inline in the awaiting-review panel. Denial supports an optional reason field via a new modal. Activity filtering is also added so users can narrow by status.

New cloud function tool support: Validation and form fields are added for three new serverless tool types — AWS Lambda, GCP Cloud Run, and Azure Functions — including their configuration schemas (ARN/identifier, description, input schema).

New icons: LambdaIcon, GoogleCloudRunIcon, and MicrosoftActionsIcon are added to the design system to represent the new tool types and action states. The LightningIcon is also updated.

DiffViewer improvements: The DiffViewer design-system component receives style and Storybook story updates as a supporting change for rendering AI-generated diffs in the workbench context.

GraphQL client regenerated twice across the PR to pick up new fields (approval, action queries/mutations) added to the server schema.

Commits

Commit	Summary

Deploy in Soffi

---

Updated: 2026-07-28 13:22 UTC